Schnorr signatures offer which advantage over ECDSA that is particularly valuable for multi-signature schemes on blockchains?
-
A
They are resistant to quantum attacks by default
-
B
Multiple signatures can be aggregated into a single compact signature
-
C
They require no random nonce, eliminating nonce-reuse risk
-
D
They use symmetric keys instead of asymmetric keys